NSA IP Packet Tracking and Analysis

A Cryptome DVD is offered by Cryptome. Donate $25 for a DVD of the Cryptome 10+-years archives of 39,000 files from June 1996 to December 2006 (~4.1 GB). Click Paypal or mail check/MO made out to John Young, 251 West 89th Street, New York, NY 10024. Archives include all files of cryptome.org, cryptome2.org, jya.com, cartome.org, eyeball-series.org and iraq-kill-maim.org. Cryptome offers with the Cryptome DVD an INSCOM DVD of about 18,000 pages of counter-intelligence dossiers declassified by the US Army Information and Security Command, dating from 1945 to 1985. No additional contribution required -- $25 for both. The DVDs will be sent anywhere worldwide without extra cost.

6 June 2007

nsa-ping.htm        + NSA Resources For Rapid Targeting and Analysis   June 2, 2007
nsa-ip-blocks.htm   + More NSA IP Blocks in CIDR Format Update         May 28, 2007

A sends:

More NSA IP info used for routine packet tracking and analysis at the Internet 
IXP-level. NSA has primarily used, starting at least mid-2006, the following 
IP ranges, among others previously reported via Cryptome.org (some duplication 
here of those IPs previously reported)

NSA use of Korea Telecom resources has picked up considerably since Cryptome's 
June 2nd 2007 posting.

Aikotech
193.17.213.0 - 193.17.213.255
Kharkiv Ukraine
gate.aikotech.com.ua [193.17.213.10]
ns.secondary.net.ua [195.149.112.1]

ANDROID INDUSTRIES LLC
12.18.117.32 - 12.18.117.47
ns64.worldnic.com [205.178.189.32]
ns63.worldnic.com [205.178.190.32]
ns63.worldnic.com [205.178.190.32]

AOL
daha-07.ns.aol.com [64.12.51.133]
daha-02.ns.aol.com [205.188.157.233]
daha-01.ns.aol.com [152.163.159.233]
dns-02.ns.aol.com [205.188.157.232]
dns-01.ns.aol.com [64.12.51.132]

ATHOME-BENELUX-ENSCHEDE-50
82.72.0.0 - 82.75.255.255
84.31.116.0 - 84.31.119.255
Amsterdam NL
ns4.home.nl [213.51.144.75]	
ns3.home.nl [213.51.128.75]
ns2.home.nl [213.51.145.75]	
ns1.home.nl [213.51.129.75]	
ns.ripe.net [193.0.0.193]

AT&T Worldnet Services
12.94.0.0 - 12.95.255.255
12.78.0.0 - 12.79.255.255
dbru.br.ns.els-gms.att.net [199.191.128.106]
cbru.br.ns.els-gms.att.net [199.191.128.105]
dmtu.mt.ns.els-gms.att.net [12.127.16.70]
cmtu.mt.ns.els-gms.att.net [12.127.16.69]
fbru.br.ns.els-gms.att.net [12.127.17.74]
fmtu.mt.ns.els-gms.att.net [12.127.16.79]
ebru.br.ns.els-gms.att.net [12.127.17.73]
emtu.mt.ns.els-gms.att.net [12.127.16.73]

Beijing Teletron Telecom Engineering Co., Ltd.
219.238.0.0 - 219.239.255.255
b.in-addr.cn [203.119.26.3]
c.in-addr.cn [203.119.27.3]
a.in-addr.cn [203.119.25.3]
dns2.datadragon.net [211.147.6.4]
dns1.datadragon.net [211.147.6.3]

Bell-Northern Research
47.0.0.0 - 47.255.255.255
ns-rch47.nortelnetworks.com [47.230.0.22]
ns-ott47.nortelnetworks.com [47.248.0.22]

Boeing.com
130.76.0.0 - 130.76.255.255
stldnsxp01.boeing.com [130.76.96.65]
slbdnsxp01.boeing.com [130.76.64.54]
blvdnsxp01.boeing.com [130.76.32.12]

bras5.pltnca
69.110.32.0 - 69.110.47.255
San Ramon CA
ns2.pbi.net [206.13.29.11]	
ns1.pbi.net [206.13.28.11]

CESG
(Information Assurance (IA) branch of GCHQ
Cheltenham, Gloucestershire, UK
217.32.105.0 - 217.32.105.127
217.35.209.0 - 217.35.209.255
ns0.bt.net. [217.35.209.188]
ns1.bt.net. [217.32.105.91]
ns2.bt.net. [217.32.105.90]

China Telecom
218.13.0.0 - 218.18.255.255
220.160.0.0 - 220.162.255.255
221.224.0.0 - 221.231.255.255
ns.ptt.js.cn [218.2.135.2]
ns.jsinfo.net [221.228.255.2]
dns1.fz.fj.cn [202.101.98.54]	
dns.fz.fj.cn [202.101.98.55]
dns.ndptt.fj.cn [202.101.110.55]
dns.guangzhou.gd.cn [202.96.128.68]
ns.guangzhou.gd.cn [202.96.128.143]

Chinanet Hebei Province
219.148.0.0 - 219.148.159.255
dns2.ctnt.com.cn [219.146.0.253]
dns1.ctnt.com.cn [219.150.32.142]

Citicorp
169.160.0.0 - 169.183.255.255
1900 Campus Commons Drive
Reston VA
NO DNS Record Returns

City Telecom (H.K.) Ltd.
Hong Kong
61.92.0.0 - 61.92.255.255
ns2o.ctihk.com [203.186.94.21]
ns1o.ctihk.com [203.80.96.8]

Comcast Cable Communications, Inc.
71.227.0.0 - 71.227.63.255
Mt Laurel NJ

dns.inflow.pa.bo.comcast.net [68.87.64.164]
dns.cmc.co.denver.comcast.net [68.87.66.164]

Computer Sciences Corporation
Falls Church VA
20.0.0.0 - 20.255.255.255
ns2.csc.com [20.1.107.21]
ns1.csc.com [20.1.107.20]

CNCGROUP Jilin province network
218.27.0.0 - 218.27.255.255
CIDR/Netmask:218.27.0.0/16
Address: NO.3535,Renmin Street, ChangChun ,
Jilin province , 130021 , P.R. China
DNS:
ns.jlccptt.net.cn [202.98.0.68]
ns2.jljlptt.net.cn [202.98.5.68]

DoD Network Information Center
6.0.0.0 - 6.255.255.255
11.0.0.0 - 11.255.255.255
22.0.0.0 - 22.255.255.255
26.0.0.0 - 26.255.255.255
28.0.0.0 - 28.255.255.255
30.0.0.0 - 30.255.255.255
205.0.0.0 - 205.55.255.255
214.0.0.0 - 214.255.255.255
215.0.0.0 - 215.255.255.255

Headquarters, USAAISC
Fort Huachuca AZ
55.0.0.0 - 55.255.255.255

Enertel N.V.
62.25.16.0 - 62.25.25.255
Enertel N.V.
Dr. Klinkertweg 2-4
NL-8025 BS ZWOLLE
No DNS Found

Ericsson Network Systems, Inc.
129.192.0.0 - 129.192.255.255
ns2.ericsson.se [193.180.251.39]	
e3dns.ericy.com [198.24.6.2]
ns1.ericsson.se [193.180.251.38]
ns2.hsroc.net [129.192.124.2]
ns1.hsroc.net [129.192.124.1]	

Hanaro Telecom, Inc.
218.48.0.0 - 218.49.255.255
HANANET
Hanaro Telecom, Inc.
KR
ins2.hananet.net [221.139.108.196]
ins1.hananet.net [210.180.98.86]

ns3.he.net [216.218.132.2]sandy.thehideout.net.
ns2.he.net [216.218.131.2]sandy.thehideout.net
ns1.he.net [216.218.130.2]sandy.thehideout.net. 
Previously, while using the name of "FAST COLOCATION SERVICES," with an address 
in Wasilla AK (Alaska), USA; DNS was:
sandy2.thehideout.net [72.52.64.32]
sandy.thehideout.net [72.52.64.32]

FAST COLOCATION SERVICES
204.16.208.0 - 204.16.211.255
Wasilla AK (Alaska)
sandy2.thehideout.net [72.52.64.32]
sandy.thehideout.net [72.52.64.32]

freenet Cityline GmbH
89.55.0.0 - 89.55.255.255
Duesseldorf Germany DE
wayne.mcbone.net [62.104.198.72]
ns.ripe.net [193.0.0.193]
center-n.mcbone.net [194.97.3.4]
dns.mcbone.net [194.97.3.2]

Friedrich Alexander Universitaet
131.188.0.0 - 131.188.255.255
Friedrich Alexander Universitaet Erlangen Nuernberg
Erlangen DE
tuminfo1.informatik.tu-muenchen.de [131.159.0.1]
secondary.rrze.uni-erlangen.de [131.188.3.4]
rrzs2.rz.uni-regensburg.de [132.199.1.2]
ns.rrze.uni-erlangen.de [131.188.3.2]

Grande Communications FRISCO
72.48.0.0 - 72.48.63.255
San Marcos TX
ns1.lsn.net [66.90.133.117]
ns2.lsn.net [66.90.130.10]

Hanaro Telecom, Inc.
726-1, Janghang2-dong, Goyang-si, Ilsan-gu, Seoul KR
218.48.0.0 - 218.49.255.255
ins2.hananet.net [221.139.108.196]
ins1.hananet.net [210.180.98.86]

Hewlett-Packard Company
Palo Alto CA
146.204.0.0 - 146.207.255.255
paloalto.americas.hp.net [15.243.160.50]
atlanta.americas.hp.net [15.227.128.50]

IBM Corporation
9.0.0.0 - 9.255.255.255
No DNS Found

iGCK3-RIPE
62.143.48.0 - 62.143.55.255
Kerpen Germany
ns2.ish.de [80.69.100.12]
ns.ripe.net [193.0.0.193]
ns1.ish.de [80.69.98.110]

INSIGHT COMMUNICATIONS COMPANY, L.P.
74.128.0.0 - 74.143.255.255
10200 Linn Station Road Suite 125
Louisville KY 40223

Interop Show Network
San Francisco CA
45.0.0.0 - 45.255.255.255
solaris.cc.vt.edu [198.82.160.249]
dns.interop.net [199.45.1.20]

Japan Network Information Center
158.198.0.0 - 158.215.255.255

220.208.0.0 - 220.223.255.255

ns1.itscom.jp [219.110.2.13]
ns0.itscom.jp [219.110.2.12]
ns2.tsukuba-wan.ne.jp [219.112.225.163]
f1odns01.bosai.go.jp [158.203.31.200]
f1odns02.bosai.go.jp [158.203.31.120]

JWC Internet Services

210.8.48.128 - 210.8.48.255

228 Jones Road
Bellbird Park, QLD 4300 AU
yarrina.connect.com.au [192.189.54.17]
warrane.connect.com.au [192.189.54.33]

KOREA TELECOM

59.0.0.0 - 59.31.255.255
221.144.0.0 - 221.168.255.255

d.dns.kr [203.255.234.103]	
f.dns.kr [218.38.181.90]
e.dns.kr [202.30.124.100]
b.dns.kr [61.74.75.1]	
c.dns.kr [203.248.246.220]
g.dns.kr [202.31.190.1]
rev1.kornet.net [211.216.50.170]
rev2.kornet.net [211.216.50.180]

Level 3 Communications, Inc.
4.0.0.0 - 4.255.255.255
8.0.0.0 - 8.255.255.255
Broomfield CO
poolns2.level3.net [209.244.0.8]
poolns1.level3.net [4.0.0.8]
ns1.level3.net [209.244.0.1]
ns2.level3.net [209.244.0.2]
dnsauth3.sys.gtei.net [4.2.49.4]
dnsauth2.sys.gtei.net [4.2.49.3]
dnsauth1.sys.gtei.net [4.2.49.2]

Lockheed Martin Corporation
192.91.146.0 - 192.91.175.255
ns2.lmco.com [192.91.147.5]
ns3.lmco.com [192.35.35.5]	
ns1.lmco.com [192.31.106.5]

Lyonnaise Communications
81.65.182.0 - 81.65.183.255
Lyonnaise Communications
20 place des vins de France
75 614 PARIS Cedex 12
FRANCE
ns2.noos.net [212.198.2.62]
ns1.noos.net [212.198.1.66]

Macedonian Post & Telecommunications
Skopje, Macedonia
62.162.67.0 - 62.162.67.255
ns-pri.ripe.net [193.0.0.195]	
tinnie.arin.net [199.43.0.195]	
ns-ext.isc.org [204.152.184.64]
sunic.sunet.se [192.36.125.2]
ns3.nic.fr [192.134.0.49]
sec3.apnic.net [202.12.28.140]
sec1.apnic.net [202.12.29.59]

Merit Network Inc.
35.0.0.0 - 35.255.255.255
dns3.merit.net [207.72.112.10]
dns1.merit.net [198.108.1.43]
dns2.merit.net [198.109.64.250]

Microsoft
207.46.0.0 - 207.46.255.255
ns5.msft.net [65.55.238.126]
ns2.msft.net [65.54.240.126]
ns1.msft.net [207.68.160.190]
ns3.msft.net [213.199.161.77]	
ns4.msft.net [207.46.66.126]

Neostrada Plus
Lublin Poland (PL)
ns3.tpnet.pl [80.50.50.200]	bij68.neoplus.adsl.tpnet.pl. 	139ms
ns1.tpnet.pl [80.50.50.100]	bij68.neoplus.adsl.tpnet.pl. 	124ms
ns2.tpnet.pl [80.50.50.150]	bij68.neoplus.adsl.tpnet.pl. 	133ms

Nonassigned/Withdrawn/Reserved IP Ranges Actually Used Or Intended to Be 
Used By NSA as Of Mid-2007:
41.0.0.0 - 41.255.255.255
117.0.0.0 - 117.255.255.255
118.0.0.0 - 118.255.255.255
119.0.0.0 - 119.255.255.255
120.0.0.0 - 120.255.255.255
122.0.0.0 - 122.255.255.255
128.0.0.0 - 128.255.255.255
129.0.0.0 - 129.255.255.255
130.0.0.0 - 130.255.255.255
131.0.0.0 - 133.255.255.255
134.0.0.0 - 134.255.255.255
135.0.0.0 - 135.255.255.255
136.0.0.0 - 136.255.255.255
137.0.0.0 - 137.255.255.255
138.0.0.0 - 138.255.255.255
139.0.0.0 - 139.255.255.255
140.0.0.0 - 140.255.255.255
141.0.0.0 - 141.255.255.255
142.0.0.0 - 142.255.255.255
143.0.0.0 - 143.255.255.255
144.0.0.0 - 144.255.255.255
145.0.0.0 - 145.255.255.255
146.0.0.0 - 146.255.255.255
147.0.0.0 - 147.255.255.255
148.0.0.0 - 148.255.255.255
149.0.0.0 - 149.255.255.255
150.0.0.0 - 150.255.255.255
151.0.0.0 - 151.255.255.255
152.0.0.0 - 152.255.255.255
153.0.0.0 - 153.255.255.255
154.0.0.0 - 154.255.255.255
155.0.0.0 - 155.255.255.255
156.0.0.0 - 156.255.255.255
157.0.0.0 - 157.255.255.255
158.0.0.0 - 158.255.255.255
159.0.0.0 - 159.255.255.255
160.0.0.0 - 160.255.255.255
161.0.0.0 - 161.255.255.255
162.0.0.0 - 162.255.255.255
163.0.0.0 - 163.255.255.255
165.0.0.0 - 165.255.255.255
166.0.0.0 - 166.255.255.255
167.0.0.0 - 167.255.255.255
168.0.0.0 - 168.255.255.255
169.0.0.0 - 169.255.255.255
170.0.0.0 - 170.255.255.255
171.0.0.0 - 171.255.255.255
172.0.0.0 - 172.255.255.255
173.0.0.0 - 173.255.255.255
174.0.0.0 - 174.255.255.255
175.0.0.0 - 175.255.255.255
176.0.0.0 - 176.255.255.255
177.0.0.0 - 177.255.255.255
178.0.0.0 - 178.255.255.255
179.0.0.0 - 179.255.255.255
180.0.0.0 - 180.255.255.255
181.0.0.0 - 181.255.255.255
182.0.0.0 - 182.255.255.255
183.0.0.0 - 183.255.255.255
184.0.0.0 - 184.255.255.255
185.0.0.0 - 185.255.255.255
186.0.0.0 - 186.255.255.255
187.0.0.0 - 187.255.255.255
188.0.0.0 - 188.255.255.255
191.0.0.0 - 191.255.255.255
197.0.0.0 - 197.255.255.255
198.0.0.0 - 198.255.255.255
223.0.0.0 - 223.255.255.255

NSA
144.52.0.0 - 144.52.255.255
Unassigned (but NSA)

205.168.0.0 - 205.171.255.255
DCA-ANS-01.INET.QWEST.NET
[205.171.9.242]

144.51.0.0 - 144.51.255.255
ROMULUS.NCSC.MIL
[144.51.5.2] 

205.168.0.0 - 205.171.255.255
SVL-ANS-01.INET.QWEST.NET
[205.171.14.195]

144.51.0.0 - 144.51.255.255
TOPSCALE.nsa.gov
[144.51.68.4] 

NSA.gov
12.110.110.192 - 12.110.110.255
dmtu.mt.ns.els-gms.att.net [12.127.16.70]	
cbru.br.ns.els-gms.att.net [199.191.128.105]	
cmtu.mt.ns.els-gms.att.net [12.127.16.69]	
dbru.br.ns.els-gms.att.net [199.191.128.106]

Performance Systems International Inc.
38.0.0.0 - 38.255.255.255
1015 31st St NW
Washington DC 20007 US
ns.psi.net [38.8.48.2]
ns2.psi.net [38.8.50.2]
auth2.dns.cogentco.com [66.28.0.30]
auth1.dns.cogentco.com [66.28.0.14]

Road Runner HoldCo LLC
13241 Woodland Park Road
Herndon VA 20171

70.112.0.0 - 70.127.255.255

dns6.rr.com [66.75.164.5]	cpe-70-112-0-0.austin.res.rr.com. 	45ms
dns5.rr.com [65.24.0.171]	cpe-70-112-0-0.austin.res.rr.com. 	47ms
dns3.rr.com [24.30.199.7]	cpe-70-112-0-0.austin.res.rr.com. 	46ms
dns2.rr.com [24.30.201.3]	cpe-70-112-0-0.austin.res.rr.com. 	46ms
dns1.rr.com [24.30.200.3]	cpe-70-112-0-0.austin.res.rr.com. 	46ms

Siemens AG
158.92.166.229
158.92.0.0 - 158.92.255.255
Siemens AG
S-171 95 Solna Sweden

SITA-Societe Internationale de Telecommunications ASITA-A
57.61.61.63
57.0.0.0 - 57.255.255.255
Neuilly FR
ns2.equant.net [57.68.127.194]
ns1.equant.net [57.66.127.194]
ns3.equant.net [57.70.127.194]

Stentor National Integrated Communications Network
St John, New Brunswick, Canada
142.167.14.201
142.167.0.0 - 142.167.255.255
opal.nbnet.nb.ca [198.164.30.2]
onyx.nbnet.nb.ca [198.164.4.2]

Telecom Xtra 
222.153.144.0 - 222.153.159.255
Auckland NZ
reliant.netgate.net.nz [202.37.245.20]
defiant.netgate.net.nz [202.37.245.17]

Telekom Austria Aktiengesellschaft
62.46.0.0 - 62.46.255.255
kdns3.highway.telekom.at [213.33.98.150]	
kdns2.highway.telekom.at [195.3.96.86]
kdns1.highway.telekom.at [195.3.96.85]

Telekomunikacja Polska S.A.
Warsaw Poland
217.99.114.0 - 217.99.114.255
ns3.tpnet.pl [80.50.50.200]
ns2.tpnet.pl [80.50.50.150]
ns1.tpnet.pl [80.50.50.100]

Telia Sonera AB
Stockholm Sweden

78.64.0.0 - 78.79.255.255
No DNS Found

81.224.0.0 - 81.236.255.255
dns2.telia.com [81.228.10.67]
dns1.telia.com [81.228.11.67]

Telstra Internet
124.176.0.0 - 124.191.255.255
Canberra AU
ns1.bigpond.net.au [61.9.128.17]
ns2.bigpond.net.au [61.9.192.17]

TETON WIRELESS TELEVISION, INC.
63.239.240.0 â€“ 63.239.255.255
Idaho Falls ID
dca-ans-01.inet.qwest.net [205.171.9.242]
svl-ans-01.inet.qwest.net [205.171.14.195]

ThePlanet.com Internet Services, Inc.
70.84.0.0 - 70.87.255.255
Dallas TX
ns2.theplanet.com [70.86.61.135]
ns1.theplanet.com [207.44.128.228]

University of Electro-Communications
130.153.0.0 - 130.153.255.255
adm2.uec.ac.jp [130.153.8.67]
adm.uec.ac.jp [130.153.26.6]

Universita' degli Studi â€“ L'Aquila
L'Aquila Italy
193.204.128.0 â€“ 193.204.131.255
ns2.garr.net [193.206.141.42]
ns1.garr.net [193.206.141.38]

UUNet
Herndon VA
auth10.ns.wcom.com [198.6.100.21]	
auth20.ns.wcom.com [198.6.100.37]
auth100.ns.uu.net [198.6.1.202]
auth110.ns.uu.net [198.6.1.114]
auth03.ns.uu.net [198.6.1.83]	
auth00.ns.uu.net [198.6.1.65]	
auth10.ns.wcom.com [198.6.100.21]	
auth20.ns.wcom.com [198.6.100.37]	

Verizon Internet Services Inc.
RestonVA
70.104.0.0 - 70.111.255.255

71.116.213.8 - 71.116.213.15
ns4.verizon.net [151.203.0.87]	
ns1.bellatlantic.net [199.45.32.40]	
ns2.bellatlantic.net [199.45.32.41]

71.116.213.13
Verizon Internet Services Inc.
RestonVA
ns4.verizon.net [151.203.0.87]	static-71-116-213-13.lsanca.dsl-w.verizon.net. 	31ms
ns2.verizon.net [151.203.0.86]	static-71-116-213-13.lsanca.dsl-w.verizon.net. 	31ms
ns1.bellatlantic.net [199.45.32.40]	static-71-116-213-13.lsanca.dsl-w.verizon.net. 	14ms
ns2.bellatlantic.net [199.45.32.41]	static-71-116-213-13.lsanca.dsl-w.verizon.net. 	27ms

Videsh Sanchar Nigam Ltd 
Bombay IN
121.240.0.0 - 121.247.255.255
dns.vsnl.net.in [202.54.1.30]
ns3.vsnl.com [203.197.12.42]

VolgaTelecom
Samara City, Russia
88.200.136.0 - 88.200.143.255
ns2.samtel.ru [62.213.2.1]
ns1.samtel.ru [62.213.0.12]

XEEX
Santa Monica CA USA
66.117.5.0 - 66.117.5.255
ns01.xeex.com [216.152.254.254]
ns02.xeex.com [69.26.170.254]

Xerox Palo Alto Research Center
Palo Alto CA US
13.0.0.0 - 13.255.255.255
adrastea.xerox.com [13.13.138.33]
carme.xerox.com [13.13.138.34]
beta.xerox.com [13.1.64.94]	

Yipes Communications, Inc
66.7.128.0 - 66.7.191.255
ns2.yipes.com [209.120.176.19]
ns2.yipes.com [66.7.155.198]
ns1.yipes.com [209.213.223.126]

YUEQING-CONSTRUCTION-CENTER
Wenzhou,Zhejiang CN
220.189.242.0 - 220.189.242.7
ns.zjnbptt.net.cn [202.96.104.18]
dns-noc.zjhzptt.net.cn [202.96.103.36]